Administrator Guide

Layer 2 Switching Commands 811
Command Mode
VLAN Configuration mode
User Guidelines
A community VLAN carries traffic among community ports and from
community ports to the promiscuous ports on the corresponding primary
VLAN.
An isolated VLAN is used by isolated ports to communicate with
promiscuous ports. It does not carry traffic to other community ports or other
isolated ports with the same primary VLAN.
The primary VLAN is the VLAN that carries traffic from a promiscuous port
to the private ports.
VLAN 1 cannot be configured in a private VLAN configuration.
Examples
console# configure terminal
console(config)# vlan 10
console(config-vlan)# private-vlan primary
console(config-vlan)# exit
console(config)# vlan 1001
console(config-vlan)# private-vlan isolated
console(config-vlan)# exit
console(config)# vlan 1002
console(config-vlan)# private-vlan community
console(config-vlan)# exit
console(config)# vlan 1003
console(config-vlan)# private-vlan community
console(config-vlan)# exit
console(config)# vlan 20
console(config-vlan)# private-vlan association 1001-1003
console(config-vlan)# end
protocol group
Use the protocol group command in VLAN Configuration mode to attach a
VLAN ID to the protocol-based group identified by
groupid . A group may
only be associated with one VLAN at a time. However, the VLAN association
can be changed. The referenced VLAN should be created prior to the creation
of the protocol-based group except when GVRP is expected to create the
VLAN.
2CSNXXX_SWUM204.book Page 811 Monday, January 25, 2016 1:25 PM